Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/9us1U0TzVfLF8cawuowwnBFDxsc.mft
File: 9us1U0TzVfLF8cawuowwnBFDxsc.mft (raw, json)
Hash identifier: GpPp/6FMb4DjQL7UDtcnyyS068YqsK5EXYjQlY9C2To=
Subject key identifier: 5C:03:97:D7:9B:28:E2:77:67:A8:48:DF:83:C7:74:01:36:57:86:91
Authority key identifier: F6:EB:35:53:44:F3:55:F2:C5:F1:C6:B0:BA:8C:30:9C:11:43:C6:C7
Certificate issuer: /CN=f6eb355344f355f2c5f1c6b0ba8c309c1143c6c7
Certificate serial: 019CAA21D4747D4D92411D092ADFFA7C22C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9us1U0TzVfLF8cawuowwnBFDxsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/9us1U0TzVfLF8cawuowwnBFDxsc.mft
Manifest number: 131D
Signing time: Sun 01 Mar 2026 16:01:09 +0000
Manifest this update: Sun 01 Mar 2026 16:01:09 +0000
Manifest next update: Mon 02 Mar 2026 16:01:09 +0000
Files and hashes: 1: 9us1U0TzVfLF8cawuowwnBFDxsc.crl (hash: 8sL0nEY0gIrktGnEuAX3cr0oFCvN/D5WhdMexFMMAsY=)
2: ueo3GEvAi3EUPHegDlQ1GPk4SCg.roa (hash: /54TVaQGpWQlA0th+KPLCMlkXLtNsFvetSrJmgBZFMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/9us1U0TzVfLF8cawuowwnBFDxsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/9us1U0TzVfLF8cawuowwnBFDxsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9us1U0TzVfLF8cawuowwnBFDxsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:d4:74:7d:4d:92:41:1d:09:2a:df:fa:7c:22:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6eb355344f355f2c5f1c6b0ba8c309c1143c6c7
Validity
Not Before: Mar 1 16:01:09 2026 GMT
Not After : Mar 2 16:01:09 2026 GMT
Subject: CN=5c0397d79b28e27767a848df83c7740136578691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f6:22:4f:ab:03:37:18:e1:e8:55:bb:5e:29:
4e:c5:3f:48:ff:ed:ba:c4:9d:f4:87:f8:d4:dc:f1:
f0:41:9c:ce:4a:a6:28:42:f5:0a:bf:6a:6e:5c:80:
44:e0:e4:45:fc:e7:0f:56:f3:0b:af:e2:1a:ce:5c:
63:86:92:06:ff:60:21:f4:76:4c:28:07:17:13:5f:
e9:f4:58:e8:73:bf:20:b9:c7:07:65:b1:41:3d:51:
b1:be:84:c7:9e:79:98:24:27:95:a2:d6:49:c4:8a:
39:16:c4:d7:bf:07:97:65:e4:ea:fe:26:92:c7:3a:
d8:46:a6:8f:31:3c:16:65:b3:d0:e8:a8:43:33:84:
65:f6:3e:c2:ab:6e:e3:b6:4c:3e:f9:24:20:ec:69:
16:1c:3b:4c:2f:9f:a2:16:2f:58:d6:1b:35:78:79:
da:69:05:6b:5a:0c:95:81:74:ee:93:0f:48:72:77:
0f:f8:5d:ee:9d:7a:b9:a9:4e:cc:bc:49:d7:b4:62:
ae:14:23:43:92:d7:89:18:74:68:68:67:e6:1a:01:
8f:97:86:ef:1f:b2:7e:c9:80:70:14:b5:16:82:32:
3b:d3:df:43:2a:db:fb:f8:ce:41:80:2f:12:52:8e:
db:6b:85:09:73:71:7d:db:41:f7:ad:5d:35:fb:6b:
47:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:03:97:D7:9B:28:E2:77:67:A8:48:DF:83:C7:74:01:36:57:86:91
X509v3 Authority Key Identifier:
keyid:F6:EB:35:53:44:F3:55:F2:C5:F1:C6:B0:BA:8C:30:9C:11:43:C6:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9us1U0TzVfLF8cawuowwnBFDxsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/9us1U0TzVfLF8cawuowwnBFDxsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/9us1U0TzVfLF8cawuowwnBFDxsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:78:5a:d2:da:12:a6:75:d7:09:96:90:62:f8:92:09:85:2e:
f4:1c:ca:04:a6:e0:84:c1:cc:bc:80:72:db:cf:2e:5d:af:f3:
fc:05:d5:8a:7d:d1:40:87:64:0b:c7:03:52:43:65:fe:19:1e:
5c:3c:63:e5:95:69:ce:b3:8c:22:07:85:25:ec:66:31:09:46:
dd:46:9d:b0:4f:ad:e8:99:32:8c:f3:d7:f3:86:e8:82:60:91:
20:07:6c:7c:69:66:fd:cc:4a:83:5d:44:0e:de:4b:f3:24:a1:
0a:22:6e:ff:60:cb:d1:31:7e:3d:f1:c1:8b:07:c7:55:7e:76:
6d:79:a7:9c:43:5f:3e:60:28:3f:25:55:13:cc:84:a9:d1:05:
ca:f3:b1:c2:57:0d:2e:8f:e5:3b:99:a1:74:6b:da:b9:af:36:
08:2c:e5:74:80:ee:8b:65:03:08:ab:f7:b1:71:da:6d:7c:78:
e0:f0:54:3f:5d:e6:2f:30:70:b7:f6:95:e6:01:08:db:f9:cb:
58:65:e7:f3:d3:cb:97:f6:11:10:6e:c5:5f:b9:2a:c6:a8:d4:
1e:6c:da:9c:42:46:95:f9:2f:8c:10:ed:10:d0:84:78:b0:3c:
0e:c4:3a:6f:bf:26:63:cf:f7:4b:e1:d1:52:be:f3:2f:1d:a1:
9f:ba:a0:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:25 2026 by rpki-client